Blockchain Capital founder allegedly loses crypto worth $6.3 million in SIM swap attack

Stephens founded Blockchain Capital, a venture capital firm focused on digital assets, in 2013 alongside brother Brad Stephens

article-image

Sergey Nivens/Shutterstock modified by Blockworks

share

Bart Stephens, the cofounder of Blockchain Capital, lost $6.3 million worth of crypto in an alleged SIM swap hack. 

Stephens filed a lawsuit against the anonymous team of hackers on Aug. 16, 2023. The identities of the perpetrators are not yet known, according to a court filing obtained by Blockworks. 

The hacks took place from May 12 to May 14 of this year, per the filing. The hackers impersonated Stephens’ brother, Brad, which allowed them to gain access to one of his accounts. They then bought a Nokia phone through Stephens’ account and carried out the SIM swap by resetting his passwords and passing two-factor authentication prompts.

The filing also revealed that the hackers messaged Stephens from his own account, telling him that they could “remotely hack anyone’s phone number in the mainland US.” They also offered Stephens a deadline to contact them via Whatsapp.

Finally, the hackers drained Stephens’ account on May 14, transferring approximately $6.3 million worth of bitcoin (BTC), ether (ETH), maker (MKR), compound (COMP), uniswap (UNI) among other tokens to wallets under their control. 

The hackers also tried to jack 80 BTC and 6,500 ETH from Stephens’ custodial cold wallet, but this failed because an employee at Blockchain Capital received an email notification that alerted them to the withdrawal attempts. 

This was when Stephens first became aware that his various accounts were being attacked.

The filing also showed evidence of the hackers funneling their ill-gotten gains through decentralized exchanges to make them harder to trace. Two such exchanges were mentioned in the filing, but they were redacted.    

Stephens is predictably seeking compensation for his lost assets and the time and money spent on investigating the hack. He is also demanding a jury trial, should the hackers be found.

The alleged exploit of Stephens’ crypto accounts is reminiscent of the mid-2017 hack of crypto investor Michael Terpin — though he lost quite a bit more.

Terpin parted ways with $24 million in digital assets, but instead of going after the attackers, he sued AT&T, his cellular provider. The court found in favor of AT&T before the case went to trial.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Tags

Upcoming Events

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Screen Shot 2024-05-16 at 14.53.45.png

Research

Loss-versus-rebalancing (LVR) is arguably Ethereum DeFi’s biggest problem, and thus reducing LVR is fundamental to the success of Ethereum. This report dives into the world of LVR. We uncover its importance for AMM designers, discuss the two major mechanism design categories and various projects developing solutions, and offer a higher level perspective on the importance of AMMs in general.

article-image

Yesterday saw Congress’ upper chamber side with the House on a measure aimed at overturning SAB 121

article-image

Oklahoma’s new crypto bill will go into effect in November of this year

article-image

The deposits hit a $20 million cap in just 45 minutes

article-image

Twelve Democratic Senators voted in favor to pass the resolution Thursday

article-image

Pump.fun is “aware” that bonding curve contracts on Pump.fun were exploited, and has since paused trading

article-image

Some investment pros are mulling crypto allocations between 1% and 10% and seeking ex-BTC exposure for interested clients